Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/JwV21IGCBTW0W_wdSHpkQ3UCaTY.roa
File:                     JwV21IGCBTW0W_wdSHpkQ3UCaTY.roa (raw, json)
Hash identifier:          JkNJYn2bHsJNNyf9Z8M9Tg/zFKKQicR2y5XDoPtbwnQ=
Subject key identifier:   27:05:76:D4:81:82:05:35:B4:5B:FC:1D:48:7A:64:43:75:02:69:36
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       018BD6ACE75A2AC5010D27CB1930CAD144A7
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/JwV21IGCBTW0W_wdSHpkQ3UCaTY.roa
Signing time:             Thu 16 Nov 2023 05:48:57 +0000
ROA not before:           Thu 16 Nov 2023 05:48:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6424
IP address blocks:        103.229.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d6:ac:e7:5a:2a:c5:01:0d:27:cb:19:30:ca:d1:44:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: Nov 16 05:48:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=270576d481820535b45bfc1d487a644375026936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:c6:a5:e2:f7:14:89:33:d4:35:4a:0c:e6:
                    24:85:77:cb:a0:b8:6c:70:d8:cb:4e:c5:8f:2d:06:
                    b2:ee:5c:24:a0:82:a3:d8:df:20:80:4a:4e:02:22:
                    4b:e2:5d:54:ad:77:b9:9e:ad:13:c5:0e:2f:e6:02:
                    53:cf:a3:26:cf:72:36:fd:59:08:2c:86:14:3e:7f:
                    64:af:3b:a4:59:ef:1c:28:f7:76:a8:71:ae:43:fe:
                    d5:76:d9:9d:04:3c:fc:d0:01:8c:28:3b:90:1d:68:
                    36:d2:4d:fd:b0:94:3f:a4:01:69:b2:d8:fb:6f:f9:
                    2e:96:a9:40:02:71:69:88:ff:50:97:d4:d6:d8:34:
                    14:d4:1a:9b:ee:33:31:55:2b:10:89:ad:23:3c:1b:
                    34:c3:9b:b9:47:ba:62:99:d9:dd:f0:e5:e9:d9:c0:
                    68:60:8f:3d:40:c9:2e:3c:83:5b:57:32:9a:b7:06:
                    95:d2:68:bb:d7:a7:98:97:34:c6:eb:e5:5e:2e:b1:
                    b4:c2:57:32:c7:24:a7:23:f1:18:b4:9f:4a:a9:3a:
                    92:05:67:5a:a6:7b:ea:b1:fd:39:17:f3:2f:29:e8:
                    45:ec:5b:a3:3e:bf:ef:b4:5e:0a:2d:bb:48:92:10:
                    de:2f:24:2a:2a:e1:0c:a2:56:da:1c:f7:84:ac:86:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:76:D4:81:82:05:35:B4:5B:FC:1D:48:7A:64:43:75:02:69:36
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/JwV21IGCBTW0W_wdSHpkQ3UCaTY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:d3:39:04:c8:9f:89:a2:ec:b0:ec:fa:c2:5b:ea:9e:b5:9b:
         a7:e2:e6:c4:a1:a9:70:8a:c2:7a:94:e6:84:df:6e:dc:a3:59:
         d2:67:26:e2:15:f9:70:8a:e1:a0:5a:85:35:c0:f5:83:31:f3:
         72:4c:5d:78:57:a8:f6:e3:70:9e:1d:c0:86:0d:fe:71:3d:ab:
         70:b2:bf:d7:df:54:31:d0:65:96:a2:31:12:33:d7:fb:5b:5e:
         88:11:83:59:eb:31:20:85:fd:ba:10:cb:49:35:22:b6:da:72:
         50:b4:fc:48:76:f8:ec:00:7d:32:e8:b3:5d:87:29:3e:c2:9c:
         73:d0:79:f6:a6:a0:82:ce:59:d1:1d:bc:de:29:f1:8f:98:8e:
         1a:db:21:98:87:bd:1c:dc:a6:55:93:6c:af:cb:94:2f:cf:45:
         31:0f:50:04:0f:92:6f:57:15:3b:38:a9:e1:0c:4f:26:a9:89:
         c5:ae:b1:1b:20:f8:c0:5c:4b:64:78:10:94:0b:91:63:7b:c3:
         b8:04:6d:5b:9c:1d:29:44:40:ca:55:a3:2b:2d:ce:be:23:3f:
         bb:30:16:55:7e:2b:8d:12:5e:49:38:fb:74:8d:cf:bc:21:ef:
         ad:62:13:74:10:ad:e3:3d:0c:a1:f0:c4:48:0a:a6:d8:46:a4:
         2d:34:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:15 2024 by rpki-client on console-ams.rpki-client.org